The question of whether to keep Java comes down to "your risk profile, and how critical that system is," says Team Cymru's Santorelli. "If the consequences of a compromise would be catastrophic," uninstall Java.

Andrew Brandt is a freelance writer and security expert.